CVE-2011-4915 : fs/proc/base.c in the Linux kernel through 3.1 allows local users to obtain sens

fs/proc/base.c in the Linux kernel through 3.1 allows local users to obtain sensitive keystroke information via access to /proc/interrupts.

Published 2020-02-20 18:15:11

Updated 2020-02-25 15:14:42

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2011-4915

Debian » Debian Linux » Version: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Matching versions
Linux » Linux Kernel
Versions up to, including, (<=) 3.1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 14.04 ESM Edition
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*
Matching versions

Top countries where our scanners detected CVE-2011-4915

Top open port discovered on systems with this issue 49152

IPs affected by CVE-2011-4915 2,636

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2011-4915!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

EPSS FAQ

0.08%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 21 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

https://security-tracker.debian.org/tracker/CVE-2011-4915

CVE-2011-4915
Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=0499680a42141d86417a8fbaa8c8db806bea1201

kernel/git/torvalds/linux.git - Linux kernel source tree
Patch;Vendor Advisory
https://lkml.org/lkml/2011/11/7/340

LKML: Vasiliy Kulikov: [PATCH] proc: restrict access to /proc/interrupts
Vendor Advisory

CVEs referencing this url
https://seclists.org/oss-sec/2011/q4/571

oss-sec: Re: Status of two Linux kernel issues w/o CVE assignments
Mailing List;Third Party Advisory
http://www.openwall.com/lists/oss-security/2011/11/07/9

oss-security - /proc/interrupts PoC: spy-interrupts
Exploit;Mailing List;Third Party Advisory
https://vigilance.fr/vulnerability/Linux-kernel-information-disclosure-about-keyboard-11131

Vulnerability Linux kernel information disclosure about keyboard | Vigil@nce
Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a2ef990ab5a6705a356d146dd773a3b359787497

kernel/git/torvalds/linux.git - Linux kernel source tree
Patch;Vendor Advisory
http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-4915.html

CVE-2011-4915 in Ubuntu
Third Party Advisory

Jump to